How to Configure SAML Authentication for ActRecipe

Item

Details

Pre-check

  • Pre-configuration is required in ActRecipe.

  • You must create an account in ActRecipe using the same email address as your TrustLogin account.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the Administrator

Request SP to configure

Provisioning

API-based Provisioning supported (Account management available in TrustLogin)

SAML JITProvisioning supported (Account management available in TrustLogin; user deletion not available)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Enabled for all users (both SAML authentication and password authentication available)

Notes

・If you wish to use SSO, you must have a contract for ActRecipe's Professional plan (paid).

Table of Contents:

TrustLogin Admin Page Settings

TrustLogin Admin Page Settings (Continued)

TrustLogin User Settings

Login Method

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "ActRecipe (SAML)".
    ActRecipe01.png

  3. From "Identity Provider Information," download the metadata using the "Download Metadata" button, and note down the "Issuer/Entity ID."
    04.png

  4. Save by clicking the "Register" button.

  5. Send the "metadata" and "Issuer/Entity ID" you obtained to your contact at ActRecipe Co., Ltd. and request that they configure SSO. You will also receive ActRecipe's SSO information, the "ACS URL" and "Entity ID."

TrustLogin Admin Page Settings (Continued)

  1. Once you receive confirmation from ActRecipe Co., Ltd. that SSO has been enabled and configuration is complete, resume the configuration. Search for the registered app on the TrustLogin app management screen and open "Change SAML App Settings."
    ActRecipe05.png

  2. Configure "Service Provider Settings" as follows.
    Entity ID

    ActRecipe's "Entity ID"

    ACS URL to the Service ActRecipe's "ACS URL"

    ActRecipe04.png

  3. Save by clicking the "Register" button.

TrustLogin User Settings

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page."
  2. On the "Register App" screen, select "ActRecipe (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name," enter it and click the "Register" button.

② When an Administrator Adds Members

  1. Search for and click the "ActRecipe (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member," select the user to add from the member list, and click the "Register" button to add them.

Login Method

① When Logging In with "ActRecipe (SAML)"

When you launch "ActRecipe (SAML)" from TrustLogin's My Page or the browser extension, you will be redirected to the ActRecipe login screen. Enter your email address and click the "SSO Login" button to log in.
ActRecipe06.png

② Using the Auxiliary App

We also provide an auxiliary app that lets you skip entering the email address and clicking the "SSO Login" button, as described in the login behavior in ①. Please register "[For SAML Auxiliary Use] ActRecipe" as a company app to use it.
ActRecipe02.png
Note: The auxiliary app is only available on PC browsers.
 On smartphone devices, autofill may not occur, or TrustLogin re-authentication may be required.


Follow the same steps as a regular app registration: have the administrator or the user themselves add the app and register their email address to use it.

ActRecipe03.png

How to Configure SAML Authentication for ActRecipe

Item

Details

Pre-check

  • Pre-configuration is required in ActRecipe.

  • You must create an account in ActRecipe using the same email address as your TrustLogin account.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the Administrator

Request SP to configure

Provisioning

API-based Provisioning supported (Account management available in TrustLogin)

SAML JITProvisioning supported (Account management available in TrustLogin; user deletion not available)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Enabled for all users (both SAML authentication and password authentication available)

Notes

・If you wish to use SSO, you must have a contract for ActRecipe's Professional plan (paid).

Table of Contents:

TrustLogin Admin Page Settings

TrustLogin Admin Page Settings (Continued)

TrustLogin User Settings

Login Method

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "ActRecipe (SAML)".
    ActRecipe01.png

  3. From "Identity Provider Information," download the metadata using the "Download Metadata" button, and note down the "Issuer/Entity ID."
    04.png

  4. Save by clicking the "Register" button.

  5. Send the "metadata" and "Issuer/Entity ID" you obtained to your contact at ActRecipe Co., Ltd. and request that they configure SSO. You will also receive ActRecipe's SSO information, the "ACS URL" and "Entity ID."

TrustLogin Admin Page Settings (Continued)

  1. Once you receive confirmation from ActRecipe Co., Ltd. that SSO has been enabled and configuration is complete, resume the configuration. Search for the registered app on the TrustLogin app management screen and open "Change SAML App Settings."
    ActRecipe05.png

  2. Configure "Service Provider Settings" as follows.
    Entity ID

    ActRecipe's "Entity ID"

    ACS URL to the Service ActRecipe's "ACS URL"

    ActRecipe04.png

  3. Save by clicking the "Register" button.

TrustLogin User Settings

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page."
  2. On the "Register App" screen, select "ActRecipe (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name," enter it and click the "Register" button.

② When an Administrator Adds Members

  1. Search for and click the "ActRecipe (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member," select the user to add from the member list, and click the "Register" button to add them.

Login Method

① When Logging In with "ActRecipe (SAML)"

When you launch "ActRecipe (SAML)" from TrustLogin's My Page or the browser extension, you will be redirected to the ActRecipe login screen. Enter your email address and click the "SSO Login" button to log in.
ActRecipe06.png

② Using the Auxiliary App

We also provide an auxiliary app that lets you skip entering the email address and clicking the "SSO Login" button, as described in the login behavior in ①. Please register "[For SAML Auxiliary Use] ActRecipe" as a company app to use it.
ActRecipe02.png
Note: The auxiliary app is only available on PC browsers.
 On smartphone devices, autofill may not occur, or TrustLogin re-authentication may be required.


Follow the same steps as a regular app registration: have the administrator or the user themselves add the app and register their email address to use it.

ActRecipe03.png